AWS summit 2018 Note

Container比較

Auto scaling, how to rebalance?

Nope.

每次新的Image 都要新的 task definition,目前有清理舊的 task definition 的機制嗎?

Nope.

Keyword:
EKS, Fargate

Fargate:不能微調,gpu, spot
EKS:helm

資安 by 趨勢科技

業配.. deep security
大概防護措施:
sha1 防竄改 -> recovery -> alert
firewall

AWS 良好架構概述

5 Pillars in AWS well-architected framework

  1. Operational excellence
    • 如果我的 panel 都是綠燈,但伺服器還是壞的?! 修正/補足 alert
  2. Security
    • IAM -> detective control -> infrastructure/data protection -> incident response
  3. Reliability
    • high avalibility
  4. Performance Efficiency
    • selection -> review -> monitoring -> trade-off
    • load testing
  5. Cost Optimization

問題:

怎麼知道哪些 region 連線速度?測試方法?

http://www.cloudping.info/

EKS

CoreOS ingress
Traefik ingress
Ingress doc 控制

放置避開
Taint -> node
Tolerance -> pod

區塊鍊

Cloudtrail 檢查 compliance